1 to 25 of 31 Contract Vulnerability Management Jobs in England

Infrastructure Architect - Patch Vulnerabilituy Management We are looking for experienced Infrastructure Automation Architects/Infrastructure Architects/Automation Architects/Platform Architects to support a major Financial Services organisation as part of a board-sponsored Vulnerability Management and Patch Management transformation programme. This is a strategic … hands-on architecture role focused on enterprise infrastructure automation, patch management, vulnerability remediation, infrastructure transformation and operational process improvement. You will help define and implement the future-state patch management operating model and automation strategy, working across complex enterprise infrastructure environments to improve patch compliance, automate remediation ...

Programme Manager - Vulnerability Management London - Hybrid £650 - £750 per day | Inside IR35 Initial 3-month contract We're looking for an experienced Programme Manager to support a major vulnerability and patch management transformation programme within a large enterprise environment. Responsibilities Manage key vulnerability and patch … management workstreams Coordinate Technology, Infrastructure, Cyber and third-party vendors Own programme plans, risks, dependencies and delivery milestones Lead senior stakeholder and vendor meetings Assess vendor capabilities and provide clear recommendations Drive actions through to completion and report progress to programme leadership Key Requirements Proven experience working ...

role in the operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment. Key Responsibilities … escalation point for all security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational ...

Enterprise Architect Job Description This role focuses on defining and maintaining an enterprise-wide cyber security architecture, with particular emphasis on Identity and Access Management (IAM) and Privileged Access Management (PAM). You will shape the current and future security landscape, create and review solution designs, and provide … most appropriate technologies. Create or contribute to an IAM/PAM strategy and support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools. Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information ...

falls inside IR35 so you will be required to work through an umbrella company for the duration of the contract. Strong experience of Patch Management and Vulnerability Management are essential for this role. You will be responsible for overseeing the end-to-end patch management lifecycle … across infrastructure, endpoints, servers, and applications, ensuring compliance with security policies, regulatory requirements and organisational standards. You must have a strong understanding of Patch Management and Vulnerability Management processes with a broad understanding of infrastructure technologies and patching processes. You will have a broad technical understanding ...

Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability … Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft Purview, eDiscovery, DSAR and DLP . Experience ...

Infrastructure Architect - Patch Management London - Hybrid Initial 3-month contract £650 - £750 per day | Inside IR35 We're looking for an experienced Infrastructure Architect with strong expertise across patch management, vulnerability remediation and infrastructure automation to support a major programme within a large enterprise environment. … help shape patching strategy, improve existing processes and identify opportunities to automate vulnerability remediation across a large enterprise environment. Responsibilities: Define and shape the future-state patch management and automation strategy Review existing patching processes and identify opportunities for improvement Develop technical solutions to improve vulnerability remediation ...

role covering banking and securities technology across EMEA, with a focus on security validation, automated penetration testing, breach and attack simulation and vulnerability remediation. You'll be the trusted technical point of contact across a broad cyber estate, working with minimal supervision on varied and technically complex problems. What … security or information security, with hands-on enterprise security tooling experience Experience with security validation, automated penetration testing, breach and attack simulation or exposure management platforms Strong technical grounding in Windows Server, Linux, networking, Active Directory, DNS and GPO Vulnerability management and remediation assurance experience across ...

delivery roadmaps that can be executed by operational teams. Key Responsibilities Develop detailed, low-level implementation plans for SecOps services, including Security Engineering, Threat & Vulnerability Management and security testing. Translate strategic objectives into clear, sequenced activities, milestones, dependencies and deliverables across a multi-year transformation roadmap. Define operational … programmes. Strong understanding of Security Operations (SecOps), including service design, operational readiness and implementation. Knowledge of enterprise security technologies, including SIEM, IAM/PAM, vulnerability management, CMDB and security monitoring platforms. Experience working within UK Government, Defence or similarly complex regulated environments. Familiarity with NCSC guidance, NIST ...

solutions across cloud, on-premise and SaaS environments. This role will suit someone with a strong background in enterprise backup and recovery, disaster recovery, vulnerability remediation and infrastructure modernisation , who enjoys owning solutions from detailed design through to implementation and operational handover. Key Responsibilities: Design, implement and improve enterprise … Remediate infrastructure vulnerabilities, technical debt and unsupported technologies. Strengthen security controls across cloud, server, network and identity platforms. Onboard infrastructure and cloud services into vulnerability management, monitoring and security tooling. Develop technical standards, operational procedures, runbooks and recovery documentation. Work closely with architecture, security, cloud, networking and service ...

libraries and templates that all three teams can reuse. Review code, infrastructure-as-code and configuration changes for security issues. Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions … IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation, control evidence and CAB records up to date. Be the go-to person when security is blocking a delivery team, cover for the senior engineers when priorities shift ...

practices across the SDLC and support the adoption of DevSecOps Support application security activities, including secure design reviews and security testing Manage and improve vulnerability management processes, supporting teams with prioritisation and remediation Produce threat modelling diagrams and supporting documentation for use by delivery teams Support the development … Experience of DevSecOps practices, including integrating security controls into CI/CD pipelines Knowledge of the secure SDLC within agile delivery environments Experience of vulnerability management Working knowledge of Kubernetes and container security The ability to communicate security risks clearly to technical and non-technical stakeholders Reasonable Adjustments ...

Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with … security technical SMEs at a comfortable level Excellent command of cybersecurity organisation practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Experience and understanding of both ...

relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction, identity resolution, deduplication, schema mapping, relationship … campaigns, tactics, techniques, and procedures. Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization. Build and evaluate graph algorithms and ML models including centrality, community detection, similarity, anomaly detection, node classification, link prediction, embeddings, and Graph Neural ...

teams, while providing technical leadership across cybersecurity transformation programmes. Essential Experience Cyber Security Architecture Strong cybersecurity background in one or more of: Identity & Access Management (IAM) Security Operations & Incident Response Threat & Vulnerability Management Cloud Security Infrastructure Security Network Security Application Security Data Security Cryptography Experience working … both Enterprise Architecture and Solution Architecture. Ability to communicate complex security concepts to both technical and non-technical stakeholders. Knowledge of security governance, risk management, threats, vulnerabilities, and incident response. Identity & Access Management 3+ years' experience with HashiCorp Vault (preferably on-prem). 3+ years' experience using Terraform ...

Analytics (CSA) is a ~$50m and ~150 headcount function, bringing together expertise across cybersecurity, data science, AI, software and cloud engineering, governance, and programme management to: Deliver cyber analytics capabilities that measurably improve cyber prevention, control effectiveness, and the resilience of operations across the cyber lifecycle Engineer, automate … secure-by-design practices IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication Encryption in transit/at rest, key management, secrets management Secure logging/telemetry, auditability, and evidence-driven control assurance Secure SDLC, vulnerability management, and dependency/supply-chain risk ...

contract We are supporting a leading international financial services organisation seeking an experienced CyberArk PAM Support Engineer (L2) to join its Identity and Access Management (IAM) Operations team. This is a hands-on technical support position focused on maintaining, troubleshooting and improving an enterprise CyberArk Privileged Access Management … investigate recurring incidents and contribute to root cause analysis. Manage incidents, service requests, problems and changes through ServiceNow in accordance with ITIL processes. Support vulnerability remediation, security patching, platform upgrades and production releases. Collaborate with third-line engineering, infrastructure, application and security teams to resolve complex technical issues. Maintain ...

VPNs and secure remote access solutions. Monitor network security events, investigate incidents and collaborate with SOC teams to improve threat detection and response. Conduct vulnerability assessments, security architecture reviews and remediation activities. Ensure network security controls align with relevant policies, industry standards and regulatory requirements. Produce technical architecture designs … MPLS, VLANs and high-availability architectures. Experience with security monitoring tools such as Microsoft Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike or Darktrace. Knowledge of vulnerability management, security risk assessments and compliance frameworks. Familiarity with automation and infrastructure-as-code tools such as PowerShell, Python, Terraform and Ansible. Excellent ...

office, remainder remote working Are you an experienced Major Incident Manager with a background in infrastructure, networks, disaster recovery and IT service management? We are seeking a skilled Major Incident Manager to lead the restoration of critical IT services across complex enterprise environments. You'll coordinate high-severity incidents … infrastructure, cloud and security environments Coordinate technical teams, suppliers and stakeholders during service outages Drive service restoration within agreed targets Chair incident and crisis management calls Conduct post-incident reviews and root cause analysis Manage ITIL Incident, problem, change and service transition processes Support disaster recovery and business continuity ...

Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access … management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management ...

Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes/Docker/AWS EKS Implement secrets, identity and access … management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management ...

will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities. The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage … Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders. Desirable Experience Continuous Controls Monitoring (CCM) platforms. Automated assurance and evidence collection. PowerShell ...

Requirements Experience: Significant cybersecurity background within highly regulated environments (e.g., Financial Services). Technical Skills: Strong foundation in Cloud/SaaS risk, Identity & Access Management (IAM), threat/vulnerability management, and Application Security. GRC Expertise: Deep capability in cyber risk articulation, control mapping, and issue management. Soft ...

alerting capabilities. Support cloud governance and compliance initiatives across the wider programme. Provide security recommendations and remediation guidance for cloud-based risks. Identity & Access Management Configure and manage AWS IAM policies, roles, and permissions. Utilise IAM Access Analyzer to identify and remediate excessive permissions. Implement least-privilege access controls … across AWS environments. Support identity security reviews and privilege management activities. Cloud Security Operations Manage and optimise AWS-native security tooling. Support threat detection, investigation, and remediation activities. Maintain security visibility and monitoring through AWS logging and security services. Assist with vulnerability management and cloud security assessments. ...

purpose. Experience defining acceptance criteria, supporting testing/UAT and documenting requirements, issues and decisions Cyber Security Risk, Security Assurance, Controls Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity, Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead … APIs, Power BI or data quality controls. Experience with Azure, AWS or GCP security controls. Experience with security data platforms, knowledge graphs, exposure management platforms or PAI. The contract opportunity for a Cyber Security Risk & Assurance SME will be on a 6-month rolling basis, with a hybrid/ ...